When you use RedHat Satellite combined with SELINUX ( permissive or enforcing )
it is needed to create SELinux Context information in a Configuration File.
Disabling SELinux on your RedHat clients will have a nice impact on your infrastructure as clients themselves do not look at SELinux context anymore but the information is still a part of the configuration file in RH Satellite.
On a client yo will see a result like this :
# rhncfg-client verify | grep selinux
So when you want to get rid of this there are 2 major options.
- Manually remove the SELinux Context entries in each configuration file in Sateliite.
- On each client retrieve all specified files from Satellite ( rhncfg-client get )
Luckily there is a solution as Satellite ( or Spacewalk ) provides an API to talk to 🙂
Here is a python script which removes SELinux Context from files, directories ans Symlink